Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
File: mvGIoEu0XU7nTETcdtcf_73AT2A.mft (raw, json)
Hash identifier: tt6Be1MbIThl+oxWHLGXM8wb5BqlzhwBJF+w5k4ukCU=
Subject key identifier: B9:9D:AF:0E:4E:D7:8B:9F:BF:FA:50:B1:25:84:C7:DD:2E:52:B1:2C
Authority key identifier: 9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
Certificate issuer: /CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Certificate serial: 01988732AA1F4E73370D5AEF3423BEBC714D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
Manifest number: 161F
Signing time: Fri 08 Aug 2025 01:01:41 +0000
Manifest this update: Fri 08 Aug 2025 01:01:41 +0000
Manifest next update: Sat 09 Aug 2025 01:01:41 +0000
Files and hashes: 1: CfUrafygYGSePjcIej3rxMGbJDI.roa (hash: X6AZHbughYjpJFwaVsupdcP3UOvik8OA/b5qiG++R3Q=)
2: mvGIoEu0XU7nTETcdtcf_73AT2A.crl (hash: c8mqfb2gxyHyIgtki/5Fx2YMYzfGC7UOY5Hu8AQNTvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 01:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:32:aa:1f:4e:73:37:0d:5a:ef:34:23:be:bc:71:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9af188a04bb45d4ee74c44dc76d71fffbdc04f60
Validity
Not Before: Aug 8 01:01:41 2025 GMT
Not After : Aug 9 01:01:41 2025 GMT
Subject: CN=b99daf0e4ed78b9fbffa50b12584c7dd2e52b12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7c:ab:8b:4a:14:fc:5b:cc:c3:c4:1a:b9:46:
7d:1f:05:99:3d:b7:c1:19:e0:19:dc:25:98:2c:0d:
a9:ca:89:2f:be:f4:7f:d6:9f:54:ed:0c:7d:24:24:
a5:8f:ac:42:f6:58:ef:f5:05:05:0b:23:4a:7d:4b:
14:d5:60:8f:70:fc:3c:ca:d2:20:0d:85:ea:c5:7e:
0f:0a:9c:dc:a6:c6:e5:86:c8:a9:3b:3b:70:fb:37:
12:8f:ec:96:8c:41:58:23:14:92:e8:3f:26:e6:54:
98:16:87:e8:61:23:d6:2f:99:a8:1c:26:cd:04:77:
a3:0a:99:b1:bf:69:a3:41:97:b2:7e:76:52:44:e2:
96:2b:d2:35:04:c2:c9:aa:40:0a:64:61:3d:a3:1f:
39:58:aa:7e:82:1c:53:03:61:df:2d:42:47:09:89:
12:89:22:39:61:b9:70:fc:24:ea:98:10:02:28:58:
d6:1d:4a:93:f2:89:a1:55:15:04:cf:f5:38:4c:48:
fb:75:fb:23:b2:4e:78:46:d3:a9:a3:fa:e1:20:4d:
2b:19:2a:c1:2c:cb:d2:65:57:8b:b0:35:44:70:4e:
a7:bb:72:27:c6:85:bf:db:19:f9:ba:95:26:92:f2:
10:22:53:75:09:e8:2f:e5:11:31:39:a3:e1:e0:d4:
51:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:9D:AF:0E:4E:D7:8B:9F:BF:FA:50:B1:25:84:C7:DD:2E:52:B1:2C
X509v3 Authority Key Identifier:
keyid:9A:F1:88:A0:4B:B4:5D:4E:E7:4C:44:DC:76:D7:1F:FF:BD:C0:4F:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mvGIoEu0XU7nTETcdtcf_73AT2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/7e0b13-ec91-483d-b96a-659b4ccd7f4a/1/mvGIoEu0XU7nTETcdtcf_73AT2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:eb:d7:ce:99:7c:c5:e7:ba:d8:f8:71:7c:18:08:b1:21:87:
7a:eb:bf:99:70:68:0b:fa:01:6d:35:1b:aa:c7:cf:13:09:9f:
24:a9:14:6f:1a:7e:c0:52:67:58:49:65:be:63:e4:b6:9b:f6:
6b:cd:74:fa:2e:b8:62:eb:bf:29:96:4a:59:41:90:60:a2:a9:
da:7f:30:b8:80:2a:14:5e:e0:37:22:17:68:da:d0:95:51:f1:
90:ac:b9:ea:50:ab:8e:52:98:17:20:09:df:ba:31:38:86:aa:
ea:4b:c7:f4:8c:ed:d3:20:55:71:26:fc:ea:35:84:48:70:35:
dd:ee:7d:63:33:e9:5e:33:f0:fe:af:5a:d0:97:8b:23:a4:72:
25:30:8f:c1:7b:07:df:f6:df:94:c5:4c:d3:9c:8b:86:41:57:
56:9c:a8:ac:65:f2:37:b9:96:f8:8b:32:b2:e8:15:fd:da:73:
90:43:16:92:6d:78:74:de:5f:c9:e6:e3:c3:b8:f9:0c:c1:5d:
62:20:d1:09:64:ec:55:30:53:5b:6b:34:ca:9c:e3:7f:26:6e:
6b:df:6b:3c:10:d9:91:63:e7:87:b6:57:fa:ce:60:88:5b:b3:
66:e0:9f:a3:64:93:81:e5:92:6b:2c:06:52:46:6e:f5:2e:dd:
25:6d:94:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:19:24 2025 by rpki-client